psique-workflow-clinic

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installation instructions include a git clone of remote code (git clone https://github.com/fahad-hamid/psique-workflow-clinic.git) which is then installed and run (npm install / npm run ...), meaning external code would be fetched and executed as part of setup.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates payment gateways and billing APIs: the Architecture lists "Payments: Stripe and Mercado Pago" and the environment variables include STRIPE and MERCADOPAGO secret keys (direct credentials). The AFIP electronic invoicing service uses the Afip SDK and calls createVoucher to generate official invoices. These are specific financial integration points (payment gateways / billing APIs) capable of executing financial operations.